Changing behavior of something that is as popular as curl to protect edge cases is strange, to say the least.
http://www.openwall.com/lists/oss-security/2017/05/01/13
http://www.securityfocus.com/bid/6940/
http://www.openwall.com/lists/oss-security/2017/05/01/13
http://www.securityfocus.com/bid/6940/